CVE-2024-0406

Deeper analysis

The vulnerability CVE-2024-0406 is a path traversal flaw (CWE-22) in the mholt/archiver package. A specially crafted tar archive can cause the library to access or write files outside the intended extraction directory during unpacking, enabling creation or overwriting of files using the privileges of the user or application performing the operation. The issue carries a CVSS 3.1 score of 6.1 with local attack vector, low complexity, and required user interaction.

An attacker with the ability to supply a malicious tar file to a victim process can exploit the flaw to achieve unauthorized file writes on the target system. Exploitation requires the target to unpack the archive with the affected library and does not grant direct remote code execution or privilege escalation beyond the permissions of the extracting user.

Red Hat has published security advisories and errata, including RHSA-2025:2449, that reference this CVE for affected products. The current EPSS score stands at 0.2206 with no material increase from its recorded peak.